One of the most advanced forms of communication on the Internet is now represented by social networks, better known as the social network. This is taken to indicate those groups of people linked by various social ties, ranging from random conoscemza, relations of friendship, to the constraints familiari.Il familiar face of this phenomenon is certainly FACEBOOK, in a short time the site became one of the most visited and used in the world. If we consider that through facebook you can also share multimedia material, here then there are all elements x lay the foundations for a mass infection. In the particular case takes its name and appearance of the worm Koobface. The virus was designed and built specifically targets users that have x an account on facebook. But virus writers are not content to hit the hundreds of millions of Facebook users and are therefore thought to infection also extend to members on MySpace. The action begins when the virus harmful to our facebook account a message arrives from an unknown user who invites us to see a movie that might interest you. To make it more credible is also a substantial number of comments attached to this video, which should dispel any doubts about its authenticity. If we decide to display the page that contains the media we are advised that the Flash Player is not updated and the display will be suspended until the button is clicked DOWNLOAD x download the update. If you choose to complete the process, it will download the file on our PC flash_update.exe not contact any official update but rather the virus W32/KOOBFACE.WORM. Once exegetes, the worm will start to settle and take possession of the system. First try to connect to one of the following addresses: y171108.com.aibcvienna.org madiabspl.com which will download and other harmful material. So from the website: img.123greetings.com joke.gif download the image, then it will connect to the sites: ipluginu.cn or currentsession.net which will start the download of another virus utilizzarecome support infection and its spread : BACKDOOR-AWQ.b. In the root Windows (c \\ windows \\ sistem32) will then create folders and SPLM NSCAN file containing a series of both viruses. Other files will be harmful instead created in c \\ windows. The worm then adds new keys to the registry in order to secure certain features such as automatic execution at system startup and the ability to hide their files to the user's view and the antivirus. To prevent the possible removal operations the virus will also modify the hosts file in order to prevent access to the sites of major software company that develops security tools. Without this, you will snatch any of the user's sensitive data and enter the infected system into a network of zombie computers controlled remotely by the virus writer and x used to continue the spread of Koobface and other types of attacks and online scams. BE CAREFUL !!!!!!!
PS anyone who believes to be infected or, is certain and can not remove it contact me and I will send you the process of elimination!!
Hello to the next
